Bypassing kernel patch protection at runtime
☆22Aug 16, 2026Updated last month
Alternatives and similar repositories for PatchGuardResearch
Users that are interested in PatchGuardResearch are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An advanced DKOM for drivers with "DRIVER_OBJECT"☆23Feb 19, 2023Updated 3 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- ☆44Apr 18, 2023Updated 3 years ago
- An example code of CiGetCertPublisherName☆15Mar 24, 2022Updated 4 years ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A simple C++ driver base with KD data block☆11Jun 25, 2022Updated 4 years ago
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆86Dec 21, 2022Updated 3 years ago
- A C++ syscall ID extractor for Windows. Developed, debugged and tested on 20H2.☆22May 25, 2021Updated 5 years ago
- Virtual and physical memory hacking library using gigabyte vulnerable driver☆71Mar 16, 2026Updated 6 months ago
- Source code on the 1.44MB 3.5 floppy accompanying the Windows NT File System Internals book.☆20Jul 31, 2019Updated 7 years ago
- x64 Windows implementation of virtual-address to physical-address translation☆54Jun 3, 2021Updated 5 years ago
- Hijack NotifyRoutine for a kernelmode thread☆39Jun 4, 2022Updated 4 years ago
- Dangling COM Keys Finder☆17Nov 16, 2021Updated 4 years ago
- Recursive and arbitrary code execution at kernel-level without a system thread creation☆160Mar 16, 2026Updated 6 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Hooking Heavens Gate in a weekend☆12Jan 1, 2022Updated 4 years ago
- Browse Page Tables on Windows (Page Table Viewer)☆242Apr 2, 2022Updated 4 years ago
- Sample for Creating a new kernel object type and supporting API☆28Sep 7, 2024Updated 2 years ago
- ☆24Jul 24, 2023Updated 3 years ago
- undetected cheat engine 7.2☆12Dec 28, 2020Updated 5 years ago
- Hooking the Windows usermode exception handler☆22Aug 13, 2024Updated 2 years ago
- Bypassing PatchGuard on modern x64 systems☆266Apr 9, 2023Updated 3 years ago
- Bypass Windows defender syscall☆17Jul 17, 2021Updated 5 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆103May 10, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Modmap updated to work on Windows 11☆28Jul 30, 2021Updated 5 years ago
- Windows Kernel Programming Experiments☆84Sep 18, 2022Updated 4 years ago
- ☆16Apr 18, 2023Updated 3 years ago
- What makes it page☆17Aug 24, 2022Updated 4 years ago
- detect hypervisor with Nmi Callback☆42Sep 25, 2022Updated 4 years ago
- Runtime smm module loader☆40Jan 12, 2023Updated 3 years ago
- hook KeyboardClassServiceCallback to prevent messing up sistema☆27Nov 14, 2023Updated 2 years ago
- ☆12Sep 21, 2021Updated 5 years ago
- A wrapper around Windows, calls explicitly the lowest possible calls☆14Jan 19, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆244Nov 6, 2019Updated 6 years ago
- Illustrates the concept of return address spoofing, and how it is used.☆14May 13, 2020Updated 6 years ago
- Decoder for VMProtect hwids☆20Aug 1, 2022Updated 4 years ago
- ☆74Dec 17, 2020Updated 5 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆270Aug 31, 2022Updated 4 years ago
- i stole this from some guys private repo on github☆58Jul 11, 2021Updated 5 years ago
- PAGE_GUARD based hooking library☆53Jul 25, 2022Updated 4 years ago